CVE-2025-5243

Nghiêm trọng 10.0 CWE-78 Công bố 20:15 24/07/2025

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SMG Software Information Portal allows Code Injection, Upload a Web Shell to a Web Server, Code Inclusion. This issue affects Information Portal: before 13.06.2025.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Tham khảo

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0174
https://www.usom.gov.tr/bildirim/tr-25-0174

Xem trên NVD ↗

PoC (1)

⚠ Chưa kiểm duyệt. Chỉ chạy trong máy ảo.

ersinerenler/CVE-2025-5243-SMG-Software-Information-Portal-Arbitrary-File-Upload-Vulnerability
★ 02 ngày trước

CVE-2025-5243 - Arbitrary File Upload / OS Command Injection in SMG Software Information Portal (CVSS 10.0)